Scotiabank, headquartered in Toronto, is one of Canada’s Big Five banks and a leading financial services provider across the Americas. Known as “the international bank,” Scotiabank offers diverse financial services and digital banking solutions to millions of customers worldwide.
An internal audit uncovered a major issue: Risks that Scotiabank’s security toolsets identified weren’t being remediated consistently and in a timely manner. Security teams could detect vulnerabilities but struggled to track unresolved ones, creating dangerous visibility gaps.
Manual tracking and follow-up processes burdened limited security resources, causing delays and creating potential compliance risks. With fragmented workflows and increasing operational strain, Scotiabank needed a scalable, automated solution to improve remediation efforts and strengthen its overall risk posture.
Scotiabank partnered with NewRocket to implement a scalable, automated solution using ServiceNow SecOps Vulnerability Response and Configuration Compliance modules. The goal was to provide clear visibility, improve efficiency, and align with Scotiabank’s risk strategy.
NewRocket worked closely with VP- and director-level stakeholders to establish an Executive Steering Committee, ensuring strong governance, clear priorities, and strategic alignment throughout the engagement.
The implementation followed a three-phase rollout, starting with early adoption and baseline establishment to build momentum and prepare for broader scaling.
To ensure sustained success, NewRocket provided three months of post-production support, optimizing the solution and driving internal adoption across Scotiabank’s teams.
Through its partnership with NewRocket, Scotiabank has significantly strengthened its security operations and is experiencing outcomes like:
“We were totally impressed with NewRocket’s depth and knowledge of ServiceNow SecOps VR, but also the amount of care and effort they applied from an account management perspective to ensure this implementation was successful.”